$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e992613-80c4-3bb5-9ebc-6c8e7a5ff1ec.roa File: 3e992613-80c4-3bb5-9ebc-6c8e7a5ff1ec.roa (raw, json) Hash identifier: sM2ngUl9/80q1Eg9gJipR2eA/jyyGTFFnr1ya4o9wWI= Subject key identifier: 89:1C:44:AC:D6:6B:29:5A:1E:0A:00:74:95:58:4B:C9:D4:0F:70:B8 Certificate issuer: /CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Certificate serial: 010D0C9F43285848B4C0F58EBE9BF945A7AF9680 Authority key identifier: 4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e992613-80c4-3bb5-9ebc-6c8e7a5ff1ec.roa Signing time: Wed 29 Jan 2025 14:00:51 +0000 ROA not before: Wed 29 Jan 2025 14:00:51 +0000 ROA not after: Tue 29 Apr 2025 13:00:51 +0000 asID: 395973 IP address blocks: 104.134.141.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 17 Feb 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:48:b4:c0:f5:8e:be:9b:f9:45:a7:af:96:80 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c Validity Not Before: Jan 29 14:00:51 2025 GMT Not After : Apr 29 13:00:51 2025 GMT Subject: CN=c6186178-d0b1-491b-9dbb-cf96f9d08083 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:f7:4b:e2:07:7f:d8:43:cf:f9:bc:36:98:f8: 64:f7:ef:b4:46:e7:37:46:01:a1:51:a8:88:97:40: 61:0c:9a:98:dc:04:74:cc:25:d1:44:ae:aa:d5:67: 0d:3e:08:ea:5a:dc:33:67:ec:5b:1a:e8:ef:50:56: ea:d2:82:66:35:6c:34:47:30:8e:7e:03:79:ef:e2: f1:f9:ea:f3:a6:54:73:62:d2:c8:99:9c:8d:e6:68: 4b:82:9b:41:cf:1a:d7:6b:98:f0:a0:67:ab:34:54: 23:a1:f6:7c:f2:86:ed:c9:1e:a2:7c:29:d8:1e:22: b4:17:fa:72:eb:08:39:44:62:42:4e:8f:19:86:7e: a1:83:68:59:8f:13:c3:ca:b4:3e:7d:ad:63:60:c1: c5:d8:73:1c:36:b9:64:7e:af:5d:81:2c:74:60:aa: 13:7f:4c:f2:be:98:74:da:86:2f:51:2f:56:39:9a: 21:af:13:12:eb:c1:95:93:3a:8a:b4:d8:eb:10:19: b4:7f:97:c0:f6:8d:55:ea:cb:04:b6:3b:cd:60:5c: 2c:ad:04:1d:17:4b:3d:ed:f6:27:30:1d:34:84:3a: 82:79:34:e1:44:7a:7c:03:5e:f2:cb:0c:c7:94:3a: f4:ce:81:7a:c7:56:6e:af:67:3c:16:f4:79:0a:1f: 9b:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 89:1C:44:AC:D6:6B:29:5A:1E:0A:00:74:95:58:4B:C9:D4:0F:70:B8 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/3e992613-80c4-3bb5-9ebc-6c8e7a5ff1ec.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.crl X509v3 Authority Key Identifier: keyid:4C:4A:1B:BC:97:51:41:9C:9F:84:4C:60:E8:EA:7B:A3:2D:6A:58:00 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d9f7c7a1-fa77-43a4-ae5a-b7bbf722dd3c.cer sbgp-ipAddrBlock: critical IPv4: 104.134.141.0/24 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 6f:d1:dc:07:d3:2a:38:9c:8f:18:d6:5f:b8:3b:92:53:84:91: 29:70:b7:b6:ce:91:9d:fc:c1:a5:d7:fa:a1:d7:5b:71:8f:70: 43:ba:6c:c7:e4:9e:08:a9:fc:a7:79:e4:e1:b0:95:d4:bf:52: ac:49:15:ad:ea:3e:34:18:a0:c7:55:04:0c:2c:8e:e9:ae:ea: a2:b0:ea:c0:b8:be:7e:3b:82:cf:14:21:28:4a:c1:f0:34:e5: dc:6d:94:cb:7a:7a:9a:22:b8:b8:fd:ea:60:6c:9e:89:04:af: 89:01:68:3f:ca:48:1a:96:76:65:cd:2f:3d:aa:7b:b3:64:e4: f8:12:fe:f1:a1:02:1e:76:70:3f:5f:37:1f:b7:5a:1e:91:6a: 61:8f:fd:a3:68:ee:2d:67:85:bc:64:77:5e:f0:23:c1:b2:ba: 63:33:38:49:10:6c:ca:c3:31:66:01:17:6a:6a:83:04:22:7a: 12:33:e4:7e:9b:66:eb:84:a8:99:3f:94:64:34:77:7b:30:2a: 6f:d7:c9:ed:58:70:a7:85:78:9e:20:be:60:8e:7e:e7:8e:06: 21:45:f4:b3:2f:8b:ba:fe:f0:d6:14:c4:df:e8:b1:c5:a6:81: 2e:a1:ae:72:89:89:7c:6b:99:b3:8d:7e:b1:4b:01:dc:a2:d2: 76:37:70:ca -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi0wPWOvpv5RaevloAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkZDlmN2M3YTEtZmE3Ny00M2E0LWFlNWEtYjdiYmY3MjJk ZDNjMB4XDTI1MDEyOTE0MDA1MVoXDTI1MDQyOTEzMDA1MVowLzEtMCsGA1UEAxMk YzYxODYxNzgtZDBiMS00OTFiLTlkYmItY2Y5NmY5ZDA4MDgzMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz/dL4gd/2EPP+bw2mPhk9++0Ruc3RgGhUaiI l0BhDJqY3AR0zCXRRK6q1WcNPgjqWtwzZ+xbGujvUFbq0oJmNWw0RzCOfgN57+Lx +erzplRzYtLImZyN5mhLgptBzxrXa5jwoGerNFQjofZ88obtyR6ifCnYHiK0F/py 6wg5RGJCTo8Zhn6hg2hZjxPDyrQ+fa1jYMHF2HMcNrlkfq9dgSx0YKoTf0zyvph0 2oYvUS9WOZohrxMS68GVkzqKtNjrEBm0f5fA9o1V6ssEtjvNYFwsrQQdF0s97fYn MB00hDqCeTThRHp8A17yywzHlDr0zoF6x1Zur2c8FvR5Ch+bZQIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFIkcRKzWaylaHgoAdJVYS8nUD3C4MIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3 YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2JiZjcyMmRkM2MvM2U5OTI2MTMtODBjNC0z YmI1LTllYmMtNmM4ZTdhNWZmMWVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDlmN2M3YTEtZmE3Ny00M2E0LWFl NWEtYjdiYmY3MjJkZDNjL2Q5ZjdjN2ExLWZhNzctNDNhNC1hZTVhLWI3YmJmNzIy ZGQzYy5jcmwwHwYDVR0jBBgwFoAUTEobvJdRQZyfhExg6Op7oy1qWAAwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2 Yy1iYTA1LTg3MTg3ZjAwOTliMi9kOWY3YzdhMS1mYTc3LTQzYTQtYWU1YS1iN2Ji ZjcyMmRkM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaIaNMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAG/R3AfTKjicjxjWX7g7klOEkSlwt7bOkZ38waXX+qHXW3GPcEO6bMfk ngip/Kd55OGwldS/UqxJFa3qPjQYoMdVBAwsjumu6qKw6sC4vn47gs8UIShKwfA0 5dxtlMt6epoiuLj96mBsnokEr4kBaD/KSBqWdmXNLz2qe7Nk5PgS/vGhAh52cD9f Nx+3Wh6RamGP/aNo7i1nhbxkd17wI8GyumMzOEkQbMrDMWYBF2pqgwQiehIz5H6b ZuuEqJk/lGQ0d3swKm/Xye1YcKeFeJ4gvmCOfueOBiFF9LMvi7r+8NYUxN/oscWm gS6hrnKJiXxrmbONfrFLAdyi0nY3cMo= -----END CERTIFICATE-----Generated at Sun Feb 16 15:23:31 2025 by rpki-client